F.11:11.4 Incident response (services + enactment)

Preface node heading:f-11-11-4-incident-response-services-enactment:51458

Content

  • Contexts: ITIL 4 (services/design), BPMN 2.0 (design), PROV‑O (run).

  • Quartet:

    • Method: Triage‑first incident handling.
    • MethodDescription: Incident workflow diagram + playbook.
    • Work: Handling INC‑3421, 09:10–10:02 (PROV Activity).
    • Actuation: none (unless modeling command invocations as outputs).
  • Statuses: Spec Approved; Work Observed (timestamps, response time); SLO “MTTR ≤ 60 min” Satisfied within the incident Window.

  • Bridge(s): BPMN (design) → PROV (run) Interpretation, CL=2, Loss: gateways vs real‑time branching.

Pay‑off: MTTR claims are tied to Work, not to the playbook.